How we keep your phone number off robocall lists

You put your phone number on your website because customers need to reach you. A few weeks later the calls start arriving from people who are definitely not customers: extended warranties, merchant services, someone who has “noticed issues with your Google listing.” That timing is not bad luck.

Where those lists come from

Most of it is bulk scraping. A program fetches millions of pages and runs a pattern match over the raw HTML, pulling out anything shaped like a phone number. It never looks at your site the way a person does. It never even draws the page. That is exactly why it is cheap enough to run across the whole internet, and why a brand-new business site gets found within days of going live.

A typical business website hands the number over three separate times:

• The visible text on your contact page.
• The tap-to-call link behind it.
• The structured data that tells Google your business details.

All three sit in plain text inside the file the scraper downloads. One page visit, three copies.

What we do instead

On the sites we build, the digits are not in that file at all. The number is encoded before the page is published, and the browser reassembles it when a real visitor arrives, filling in the visible text, the tap-to-call link, and the label a screen reader reads out. The same script adds it to the structured data at that point too.

The page we serve contains nothing shaped like a phone number. The page your customer sees looks completely normal.

What this actually stops

It stops the bulk harvesters, which is the pipeline that feeds most robocall and SMS spam lists.

It does not stop a scraper that drives a real browser. Those exist. They load the page properly, run the scripts, and would read your number the same way a visitor does. There is no way around that, and anyone who tells you otherwise is selling something.

The reason it still works is that spam lists are a volume business. Running a real browser across millions of pages costs orders of magnitude more than pattern-matching raw text, so that effort gets pointed at higher-value targets than a local contractor’s contact page. You do not have to be impossible to scrape. You just have to be more expensive than the next site on the list. This is friction, not protection, and it is worth being clear about the difference.

What it does not break

• Customers still tap the number and their phone dials it.
• Screen readers still announce it properly.
• Google still gets it for local search, because Googlebot runs scripts like any modern browser.

There is one real trade-off. A visitor with JavaScript switched off will not see the number. On our sites that link falls back to the contact page instead, and the email address is always plain text, so nobody is ever left without a way to reach you. We deliberately do not include a hidden backup copy of the number for that case, because scrapers read hidden content just fine and it would undo the whole exercise.

Is it worth doing?

If your business line is also your personal cell, or you are the person who answers it, absolutely. If you have a dedicated line sitting behind a receptionist and decent carrier spam filtering, it matters less. Either way it costs nothing to run, so it is on by default on every site we build.

Getting buried in spam calls since your site went up? Tell us about it and we will take a look at how your number is exposed.